Comment on OfficerBreaker – pptx/docx/xlsx password removerparentComments−conradludgate4yI feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author.Alternatively, hash the contents and signed using asymmetric keys. This would allow for non private key owners to validate the integrity−martinko4yI feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author.How would you validate the signature?−noodlesUK4yParent is describing a keyed HMAC scheme. JWTs sometimes use them, but key management is a massive PITA.
Comments
I feel like a hash of the contents + some secret bytes could be a convincing signature that only the owners of the secret bytes could author.
Alternatively, hash the contents and signed using asymmetric keys. This would allow for non private key owners to validate the integrity
How would you validate the signature?
Parent is describing a keyed HMAC scheme. JWTs sometimes use them, but key management is a massive PITA.